insiderthreat.westpoint.edu

- U.S. Military Academy, West Point -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:5c:f1:b6:4f:31:06:91:07:93:7b:33:9f:f8:10:f4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

U.S. Military Academy, West Point

Organization: U.S. Military Academy, West Point
State / Province: New York
Locality: West Point
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:5c:f1:b6:4f:31:06:91:07:93:7b:33:9f:f8:10:f4
Serial Number (int): 3141049807303677686884113701481746676
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ac:b6:1f:6a:c9:07:59:a4:88:1b:a8:d8:d6:23:5d:8c:c2:c1:62:ae
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 2e:31:b7:ec:a3:f8:36:56:89:10:0f:95:61:b3:73:54:1a:02:b6:30
Fingerprint (sha256): 42:ab:67:25:8f:cb:51:26:42:8f:d4:1b:4c:37:9e:f9:cd:2a:66:ec:3f:80:ed:35:2f:65:15:e6:f4:32:ed:09

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate insiderthreat.westpoint.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insiderthreat.westpoint.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insiderthreat.westpoint.edu
www.insiderthreat.westpoint.edu

Other certificates including the domain name westpoint.edu

(limited to 100 certificates)
www.westpoint.edu
oema.westpoint.edu
www.westpoint.edu
courses.westpoint.edu
help.westpoint.edu
www.westpoint.edu
NOMINATIONS.USMA.EDU
library.westpoint.edu
westpoint.edu
www.westpoint.edu
survey.westpoint.edu
westpoint.edu
help.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
help.westpoint.edu
westpoint.edu
westpoint.edu
graybooks.westpoint.edu
www.westpoint.edu
oema.westpoint.edu
graybooks.westpoint.edu
apply.westpoint.edu
graybooks.westpoint.edu
researcher.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
*.blackbelthelp.com
digitalcommons.westpoint.edu
digitalcommons.westpoint.edu
library.westpoint.edu
library.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
westpoint.edu
FIELDFORCE.WESTPOINT.EDU
westpoint.edu
eecscourses.westpoint.edu
www.westpoint.edu
oema.westpoint.edu
westpoint.edu
oema.army.mil
aimings.westpoint.edu
halo.westpoint.edu
www.westpoint.edu
www.westpoint.edu
apply.westpoint.edu
*.blackbelthelp.com
help.westpoint.edu
*.blackbelthelp.com
www.westpoint.edu
www.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
graybooks.westpoint.edu
westpoint.edu
eecscourses.westpoint.edu
survey.westpoint.edu
ninjio.westpoint.edu
www.westpoint.edu
westpoint.edu
library.westpoint.edu
FIELDFORCE.WESTPOINT.EDU
help.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
www.westpoint.edu
nominations.usma.edu
www.westpoint.edu
westpoint.edu
www.westpoint.edu
www.westpoint.edu
ams-external.westpoint.edu
www.westpoint.edu
westpoint.edu
candidate.usma.edu
ninjio.westpoint.edu
westpoint.edu
westpoint.edu
ctc.westpoint.edu
athena.westpoint.edu
NOMINATIONS.USMA.EDU
FIELDFORCE.WESTPOINT.EDU
*.blackbelthelp.com
www.westpoint.edu
www.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
www.westpoint.edu
digitalcommons.westpoint.edu
help.westpoint.edu
help.westpoint.edu
FIELDFORCE.WESTPOINT.EDU
eecscourses.westpoint.edu
insiderthreat.westpoint.edu
westpoint.edu
digitalcommons.westpoint.edu
westpoint.edu
www.westpoint.edu
www.westpoint.edu

Certificate

The complete raw certificate details for insiderthreat.westpoint.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnx2O6RQcVguogHA2udH
obhmDJNzfiDM2DSxVV1ht5/4OOxAATPuejAt0nzL85eM/TuUkrkQXK7jIJrIf7MR
sPkZPERLvquQG9WSNPqyWGv98rjbkbD4NMCQWFEgCOb8OXDTJd09mXSUPjExAoO7
cL8IvjAf15qxBYV/YszjIAB/5+oYyGGs6ZAyixLs566dyK7xsPZnCXpqzGn/K8Qf
QhlGbkYKEst2UqDYjdzNZklVzuAugIU80ix9iOmiURYDe++PEzcXdk9m3nMkrAop
L5KJglKzdUKBmG2ts3ythZWBmAB/klt3MpDsWGENlzLeP8s8REen1z2RHHcIPIEH
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3141049807303677686884113701481746676
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Point'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Military Academy, West Point'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insiderthreat.westpoint.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17987213729669492932882848575406421969030904815620448998587075440518469033841413349914006418034017277178605667278887076212816419726934864065033096930489243395524783178017558930829030765860805554321414165401982384291244209699433831415075498936113829981070650786097978125235792435708503169540055431501668992452258084357381855139551320272286518005029308823048057907143111676366486047338604605576724585611378834372538043232704518890807935588926059878126934804387241288158849611913210366972416668207865776693821217438762446950586239274944355625028380520602863202482622022118806600217988788296841737821527230010733042403087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acb61f6ac90759a4881ba8d8d6235d8cc2c162ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insiderthreat.westpoint.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insiderthreat.westpoint.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f28a6493bdf8fe44a99f379726210f4c3a1ef15df4c639caa468ce0ff75bc4ba5f452b8ef1bf20909a8949e98020a1b12f99997c190a2d3f43fcfb17c0c2bdbdaa0eb6ba7edd412a01187abe7e770658241e861235e19457fe42b8effd190de9e0fd6f325c9ec96750e7b61fd442f8af07148232d3df229d74598fa9d0a710c2b74562998c4b1b2c6955509f49e04f189d445af6f2e3161afc098f820633942240e3f81ab19a2f53c09b45b6ee68ad30734d4b123b2d45cc72a2d2ca46ed3a82ee36e9a516991fbac57276d65a121a460ecf0ab6d7ddc64b9dc002238558dfd189b2e7421c598ee9b0ce1af7b172c56d0513d5fd10667a3a203f52c7b530179